
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: TGhXGiFfVVulYDGdN9Tuc7WFoifCkeE0QKXjdN0NmrU=
Subject key identifier: 14:5E:34:C4:45:E8:58:74:B9:7F:9B:CB:82:1F:18:C6:C9:4C:CE:AC
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 15CD7B98C547ACCC95C0553EFF854E9775E7DE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 0230
Signing time: Sat 28 Jun 2025 03:19:34 +0000
Manifest this update: Sat 28 Jun 2025 03:14:34 +0000
Manifest next update: Sun 29 Jun 2025 06:29:34 +0000
Files and hashes: 1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: LCPvAW7znySUZXFz7XFpzgRN+6mbY+WRXUnz/hkIdT0=)
2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: 6N2exaTzTx6+Ih8X/wpJsKEadIzed4Z8Zyd1kYy+Twk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:cd:7b:98:c5:47:ac:cc:95:c0:55:3e:ff:85:4e:97:75:e7:de:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Jun 28 03:14:34 2025 GMT
Not After : Jun 29 06:29:34 2025 GMT
Subject: CN=145E34C445E85874B97F9BCB821F18C6C94CCEAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:eb:f6:60:ce:52:7a:5c:41:29:d6:59:b6:
a3:27:0c:9a:45:12:3f:64:b4:0f:a3:ae:b4:ea:d6:
ff:01:74:de:54:10:cd:71:30:a4:51:e8:cd:00:80:
95:59:80:93:0e:1e:f2:15:12:31:1d:60:11:96:3d:
bd:a8:cd:11:d3:d2:64:79:31:52:a1:07:8e:41:2c:
25:aa:e6:92:9b:10:ef:5a:13:e4:a5:42:b8:86:06:
23:ef:00:54:53:e6:c9:ef:bf:19:5b:15:bb:b5:4d:
bb:e2:7a:ad:f7:85:f1:bd:a9:b7:75:34:33:6e:05:
70:68:08:aa:57:2f:b6:0e:21:89:a9:96:a5:71:88:
3e:96:36:91:dd:c6:9b:fb:4e:10:15:33:03:75:a4:
d2:87:de:57:52:d7:9a:08:92:08:2e:b3:98:f3:d0:
67:c5:d4:26:a3:88:e1:54:93:3a:63:e6:cc:b3:f8:
ec:31:6c:48:d8:35:55:5f:9b:0c:9a:f3:19:24:ae:
cd:e3:91:2f:32:68:9c:50:9b:21:ca:a9:f6:65:ae:
66:d7:30:5a:9a:24:9e:4a:1e:27:39:0a:b1:a0:e6:
c7:5a:20:c8:2a:1d:11:46:eb:f6:3e:5d:f7:8f:88:
1e:19:a2:12:77:12:3b:de:c2:57:e1:8a:1e:40:47:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5E:34:C4:45:E8:58:74:B9:7F:9B:CB:82:1F:18:C6:C9:4C:CE:AC
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4b:ce:b2:ea:3c:57:ba:04:cc:de:77:e1:96:b9:d9:06:88:
c0:e4:03:91:18:8c:a9:6d:97:48:ff:9a:e2:59:8b:50:b9:83:
59:cc:66:ec:cf:62:5c:4e:be:6f:16:47:a1:7b:5a:0a:2f:aa:
3a:6b:e0:7b:3f:2b:b9:9e:bf:7b:be:c6:9d:f9:71:31:8d:00:
ed:cf:65:34:9a:cb:78:20:72:e2:b5:a8:0c:c6:18:2e:3a:73:
e7:27:79:7a:86:1b:cd:a9:4f:8c:16:e7:ce:6c:cd:c4:0c:da:
f2:25:9d:70:1d:59:01:83:a6:93:ee:df:57:bc:eb:7b:b9:b8:
13:31:d5:ae:f2:49:a3:2e:56:ca:99:8e:86:ac:35:70:a4:24:
45:2f:3e:2b:43:36:97:95:ed:19:78:84:d1:78:89:f4:f6:4a:
1a:45:78:ff:b6:ce:59:77:15:78:0d:a8:51:57:2c:a8:9b:c4:
71:65:17:de:b4:b0:a0:0e:cd:46:6a:f0:f5:d0:39:b0:5d:31:
f4:54:40:cb:89:f2:9a:15:fe:a7:3a:11:83:0d:21:61:00:18:
c9:cb:6f:88:07:d8:f1:b1:c0:8b:73:92:21:ed:fd:a2:28:66:
cc:c9:00:e5:dd:75:b6:03:ac:96:a0:c6:68:9a:76:4b:67:a2:
6c:18:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:05 2025 by rpki-client